I'm new to QlikVew and have been trying to find solution in authenticating users in QV Web Server for days.

Here is our setup:

1.We have installed QV Server (QV Web Server, not IIS) in machine A which is part of domain A, and we want to authenticate users (Windows users) who are part of domain B (corporate domain) via Active Directory.

2. Neither machine A nor domain A is part of domain B (no joining)

We use QV Small business edition.

My question is how can I configure QVS to support the user authentication thru LDAP? I read couple discussions, it seems like the only option is to build my own SSO authentication against LDAP and pass header to QVS. Is there any simple option out of the box from QVS? I want to avoid building authentication unless it's really needed.

Thanks Bill. If, due to security reasons, trusts between domains can't be established, is there any other option? It looks like I can use a custom authentication to authenticate user thru LDAP against AD. Now the problem is QVS authorization, I just learned QV SBE won't suppport DMS, only NTFS. I wish we know this early. Now, what'll be my options? Any advice? Thanks.

Hi Bill/Lien, appreciate your helps as I'm planning a production deployment with IT.

Lien,

Here are the answers to your questions.

- Does Domain A and Domain B is having same network segment ?

No, different segment. They're at two different regional data center.

- what is the service account that you used to start the QV services ?

I setup a local QVAdmin account under Administrators group to run QV services.

Bill,

Yes, I wrote SSO and was able to authenticate AD users without any issues thru LDAP. The issue now is user authorization. Because QV SBE doesn't support DMS, I am unable to manage user access unless I add user to the local server since SBE only supports NTSF mode. Any suggestions?